$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/QNiIfu0DQ_XL2QtiN84AruQHvVI.roa File: QNiIfu0DQ_XL2QtiN84AruQHvVI.roa (raw, json) Hash identifier: AYXKtlpfzg2nlWshRKzBEyWntmTM+UQyA5uHOFYCk2s= Subject key identifier: 40:D8:88:7E:ED:03:43:F5:CB:D9:0B:62:37:CE:00:AE:E4:07:BD:52 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 2459 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/QNiIfu0DQ_XL2QtiN84AruQHvVI.roa Signing time: Mon 10 Feb 2025 14:18:32 +0000 ROA not before: Mon 10 Feb 2025 14:18:32 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9924 IP address blocks: 114.198.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 02:06:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9305 (0x2459) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Feb 10 14:18:32 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=40D8887EED0343F5CBD90B6237CE00AEE407BD52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:65:4b:40:95:c0:76:22:29:ff:08:bc:a2:00: bf:c6:3b:3a:a5:d3:4f:b2:93:df:34:2b:07:27:b9: b7:c7:a2:e8:b7:18:3c:0d:36:29:4f:dc:78:b9:73: 86:76:e9:75:31:3f:e0:fd:38:61:3e:99:68:96:ce: 00:0e:8b:a0:48:78:b5:3e:36:ff:1c:47:4a:22:a3: 32:cf:f7:02:62:90:3c:e2:f4:7a:bc:1a:66:2d:25: a8:9a:b9:08:64:9d:f6:b7:5d:44:a4:c2:92:6e:03: d6:9c:f1:c9:70:cb:0c:e4:ec:93:d4:9f:da:74:0c: 8b:84:5b:ee:35:69:22:44:e8:b8:52:14:5e:f8:b9: af:8a:5f:19:b7:2e:14:4a:6b:9d:48:ac:5c:a2:b5: 61:43:7e:7a:1b:25:dc:c9:ec:6e:0e:e8:3d:d3:43: 92:a3:b1:79:9c:ec:86:d9:ae:3c:a8:ce:c1:a8:13: 92:1c:fe:65:83:51:ec:40:7e:6b:bb:9f:89:fa:94: 78:3c:a3:27:91:9c:65:97:31:81:4d:69:65:ef:f7: 41:84:2e:a7:94:74:e0:3c:29:bf:46:bf:83:a4:81: 04:8a:b0:4f:77:bd:ad:85:24:8e:6f:44:ec:4e:e7: 3e:c6:1c:0f:13:a5:97:16:f1:c2:1c:77:11:97:9d: c0:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:D8:88:7E:ED:03:43:F5:CB:D9:0B:62:37:CE:00:AE:E4:07:BD:52 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/QNiIfu0DQ_XL2QtiN84AruQHvVI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 114.198.176.0/20 Signature Algorithm: sha256WithRSAEncryption 88:5b:80:67:f6:ef:6a:47:47:07:76:91:c0:16:06:78:74:e2: 3a:45:10:6d:23:72:7a:94:31:75:64:9f:87:54:59:74:8f:5a: da:ff:5d:49:e5:8e:30:0a:44:5a:74:4e:b1:ca:e6:80:3d:0f: 1e:2b:86:ff:62:7f:71:dc:33:bc:bd:58:76:07:04:8b:fb:06: 51:02:9e:3b:9e:6c:e6:c0:1c:d6:79:32:92:5a:39:fa:f3:b6: b7:78:a0:76:36:1f:81:2b:b9:2b:28:80:92:00:4d:c3:28:43: 26:f5:09:ca:80:6a:7b:0b:ef:4a:aa:d9:eb:53:12:ff:82:22: 08:e8:60:a7:89:37:1c:a5:eb:c8:1a:16:e4:0b:6e:b8:ad:b6: 67:6c:03:b7:45:8a:09:a3:a2:63:a7:4a:da:da:9f:67:b3:cd: a6:ea:7e:77:1c:8f:36:b1:26:07:df:f3:dd:a3:2b:95:c8:99: 9a:5b:84:74:18:14:4f:02:6b:8b:fc:69:1f:cc:c6:92:50:60: 6b:17:01:97:2c:c6:63:3f:28:fb:95:1e:81:f8:ce:2d:79:3c: de:46:c3:e0:1c:e5:3b:8f:48:5a:ea:72:9b:87:b6:5b:06:f7: 7d:2a:bf:c8:eb:1c:dd:f3:ab:9e:16:3c:6b:bf:aa:61:81:50: 60:70:19:c1 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJFkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx NDE4MzJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDQwRDg4ODdFRUQwMzQz RjVDQkQ5MEI2MjM3Q0UwMEFFRTQwN0JENTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD6ZUtAlcB2Iin/CLyiAL/GOzql00+yk980KwcnubfHoui3GDwN NilP3Hi5c4Z26XUxP+D9OGE+mWiWzgAOi6BIeLU+Nv8cR0oiozLP9wJikDzi9Hq8 GmYtJaiauQhknfa3XUSkwpJuA9ac8clwywzk7JPUn9p0DIuEW+41aSJE6LhSFF74 ua+KXxm3LhRKa51IrFyitWFDfnobJdzJ7G4O6D3TQ5KjsXmc7IbZrjyozsGoE5Ic /mWDUexAfmu7n4n6lHg8oyeRnGWXMYFNaWXv90GELqeUdOA8Kb9Gv4OkgQSKsE93 va2FJI5vROxO5z7GHA8TpZcW8cIcdxGXncADAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUQNiIfu0DQ/XL2QtiN84AruQHvVIwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1FOaUlmdTBEUV9YTDJRdGlO ODRBcnVRSHZWSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBARy xrAwDQYJKoZIhvcNAQELBQADggEBAIhbgGf272pHRwd2kcAWBnh04jpFEG0jcnqU MXVkn4dUWXSPWtr/XUnljjAKRFp0TrHK5oA9Dx4rhv9if3HcM7y9WHYHBIv7BlEC njuebObAHNZ5MpJaOfrztrd4oHY2H4EruSsogJIATcMoQyb1CcqAansL70qq2etT Ev+CIgjoYKeJNxyl68gaFuQLbrittmdsA7dFigmjomOnStran2ezzabqfnccjzax Jgff892jK5XImZpbhHQYFE8Ca4v8aR/MxpJQYGsXAZcsxmM/KPuVHoH4zi15PN5G w+Ac5TuPSFrqcpuHtlsG930qv8jrHN3zq54WPGu/qmGBUGBwGcE= -----END CERTIFICATE-----Generated at Mon Apr 7 02:00:19 2025 by rpki-client